Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1619389
Summary: | mod_ssl does not work with TLS 1.3-enabled openssl | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Rob Crittenden <rcritten> |
Component: | httpd | Assignee: | Luboš Uhliarik <luhliari> |
Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | 29 | CC: | anon.amish, awilliam, bnater, gmarr, jkaluza, jorton, kevin, luhliari, pahan, rbarlow, robatino, sgallagh |
Target Milestone: | --- | Keywords: | Reopened |
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | httpd-2.4.34-6.fc29 httpd-2.4.34-8.fc29 | Doc Type: | If docs needed, set a value |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2018-10-02 19:28:33 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 1517012 |
Description
Rob Crittenden
2018-08-20 17:21:06 UTC
Package: httpd-2.4.34-5.fc29 Build: https://koji.fedoraproject.org/koji/buildinfo?buildID=No such build: httpd-2.4.34-5.fc29 Confirmed as working now, thanks. It looks like this was maybe only fixed on Rawhide? I don't see an f29 build with similar timestamp or nvr: https://koji.fedoraproject.org/koji/packageinfo?packageID=280 I think I am experiencing this on my f29 httpd server as well. I am proposing this as a Fedora 29 blocker. I hope you don't mind - I'm also going to set this back to ASSIGNED so it's clear there are still changes needed. I'm +1 Freeze Exception here, but I'm not aware of any Beta-blocking criterion that httpd violates. I confess that I'm not fully familiar with the beta blocking criterion. I just read a bit about it at the very long page about f29 beta blockers[0]. If httpd isn't part of the test plan for beta testing, then I suppose I agree. Should we mark it as a final blocker instead? [0] https://fedoraproject.org/wiki/Fedora_29_Beta_Release_Criteria#Beta_Blocker_Bugs httpd is indirectly part of the Basic criteria, via the FreeIPA requirements - https://fedoraproject.org/wiki/Basic_Release_Criteria#freeipa-server-requirements : "...The web UI must be available and allow at least basic configuration of user accounts and permissions..." FreeIPA tests have failed for the last several Rawhide/Branched composes, this could be (part of) the reason. I hadn't had time to investigate it yet as I was working on the *F27* FreeIPA breakage we had instead... Ah, I forgot about the FreeIPA side of things. Yeah, if that's breaking FreeIPA's web UI, then this is definitely a blocker. Since it was Rob that reported it I was kinda assuming that was the consequence, however in fact in today's Rawhide testing, the FreeIPA web UI seems to be working OK. The tests break at other points, but the web UI does seem to work. Perhaps this is an upgrade-only bug, and it works on fresh install? Package: httpd-2.4.34-5.fc29 Hi Joe! Since Bodhi was activated for Fedora 29 today, can you also make an update? httpd-2.4.34-5.fc29 has been submitted as an update to Fedora 29. https://bodhi.fedoraproject.org/updates/FEDORA-2018-a50c9c90b9 httpd-2.4.34-5.fc29 has been submitted as an update to Fedora 29. https://bodhi.fedoraproject.org/updates/FEDORA-2018-a50c9c90b9 I'm at least +1 FE for this. +1 blocker if it really breaks the FreeIPA web UI on upgrade or something. Same. +1 FE, +1 blocker if it breaks FreeIPA. httpd-2.4.34-5.fc29 has been pushed to the Fedora 29 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-a50c9c90b9 That's +3 FE (Stephen, Kevin and me) so setting Accepted. Discussed during the 2018-09-04 blocker review meeting: [1] The decision to delay the classification of this as a bug was made as it's still not clear if there's a criteria violation here, and it's already accepted as a freeze exception. We will try to clarify if there's a criteria violation here in time for next week. [1] https://meetbot-raw.fedoraproject.org/fedora-blocker-review/2018-09-04/f29-blocker-review.2018-09-04-16.01.txt httpd-2.4.34-5.fc29 has been pushed to the Fedora 29 stable repository. If problems still persist, please make note of it in this bug report. Package: httpd-2.4.34-6.fc29 Dropping AcceptedFreezeException, as we gave the exception for the previous build. Not sure if it's worth taking further changes as FE now unless there's a clear impact on a supported workflow, might be just fine to leave them as regular updates. httpd-2.4.34-8.fc29 has been submitted as an update to Fedora 29. https://bodhi.fedoraproject.org/updates/FEDORA-2018-7f2a17fb92 httpd-2.4.34-8.fc29 has been pushed to the Fedora 29 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-7f2a17fb92 httpd-2.4.34-8.fc29 has been pushed to the Fedora 29 stable repository. If problems still persist, please make note of it in this bug report. |